- The variable
assessments_enabled
has been introduced with default set totrue
. - The default
auth_method
has been modified fromiam_user
toiam_role_oidc
. - The variable
notification_configuration
has been modified from alist(object)
to amap(object)
. They key should be the name of the notification configuration as it will be displayed in Terraform Cloud.
additional_tfe_workspace
has been renamed toadditional_tfe_workspaces
.
The variables account
, environment
, and workload_permissions_boundary_arn
are now consolidated into a single variable set per account.
This change reduces the total number of Terraform resources needed by allowing this set to be linked to workspaces, rather than duplicating variables for each one.
Upgrading to this version will recreate these variables.
To add more account-specific variables, use the account_variable_set
resource.
3.0.0 introduces new optional variables and removes existing optional variables. Upgrading requires changes if you currently use the slack_notification_triggers
or slack_notification_url
variables.
In both var.additional_tfe_workspaces
and var.tfe_workspaces
:
- Added
workspace_tags
- The
slack_notification_triggers
&slack_notification_url
variables have been merged intonotification_configuration
. This allows to easily configure notifications for both slack and teams.
2.0.0 is a major refactor to make use of optional
. This commit also introduces breaking changes while we consolidate variables that previously were optional but could not be part of an object (because we had no way to make specific object keys optional).
- Renamed
var.account_settings
tovar.account
- Renamed
var.tfe_workspace_settings
tovar.tfe_workspace
- Renamed
var.tfe_workspace_settings.terraform_organization
tovar.tfe_workspace.organization
- Moved variables with a
tfe_workspace_
prefix intovar.tfe_workspace
(and removed the prefix)
var.account.environment
(wasvar.account_settings.environment
) is now an optional value- The region configured in the workspace is now set using
var.tfe_workspace.default_region
(wasvar.region
) and has been made mandatory var.tfe_workspace.branch
now defaults tomain
to follow the community standard, if usingmaster
be sure to set this in your workspace configurationsvar.tfe_workspace.global_remote_state
now defaults tofalse
, you will now need to set any workspace IDs that need access to this state- Additional workspaces now inherit the following values from the default workspace unless specified:
auth_method
branch
execution_mode
oauth_token_id
region
repository_identifier
slack_notification_triggers
slack_notification_url
ssh_key_id
team_access
terraform_version
trigger_prefixes
working_directory
- terraform-aws-mcaf-account module updated to v0.5.1: Fixes deprecation warning by using
organizational_unit_path
instead oforganizational_unit
. This will generate a change in plan and will attempt to update the account via Service Catalog. Service Catalog will "re-enrol" the account as it is not smart enough to realise the current OU and target OU are the same, so a ~10 min apply while this happens is expected and a one time event.
Updated requirements:
- Minimum terraform version has been set to v1.3.0
- Minimum MCAF provider version has been set to v0.4.2 to be compatible with the latest version of service catalogue
v1.1.0
is not backwards compatible with v1.0.0
. First follow the steps to upgrade to v1.0.0
. The option to automatically create email address with Office 365 has been removed.
This upgrade requires the following changes:
- variable
account_settings
no longer supports a field calledcreate_email_address
.
v1.0.0
is not backward compatible with v0.4.1
because terraform-aws-mcaf-workspace changed the variables it uses to connect Terraform workspaces to a VCS.
This upgrade requires the following changes:
- Variable
tfe_workspace_settings
requires an additional field calledglobal_remote_state
, either enabling or disabling global remote state on the workspace. - Variable
tfe_workspace_settings
requires an additional field calledremote_state_consumer_ids
, containing a set of workspace ID's that are allowed access to the global remote state. Set tonull
to share with everyone. - Variable
tfe_workspace_settings
requires an additional field calledworking_directory
, sets the working directory for a workspace. Set tonull
to fall back to module defaults. - The fields
repository_owner
andrepository_name
have been replaced by a single field calledrepository_identifier
, combining the two values into a single field. Set tonull
to disable VCS connection. - Additional workspaces require fields
global_remote_state
andremote_state_consumer_ids
to be present. - Within additional workspaces, the fields
repository_owner
andrepository_name
have been replaced by a single field calledrepository_identifier
, combining the two values into a single field. Set tonull
to disable VCS connection.